5ug-cli (>=1.0.72, <=1.4.0), @0xgraph/cli (>=0.0.1, <=0.1.1) +474 more potentially affected by CVE-2022-29078 via ejs (>=3.0.1, <=3.1.6)

ejs NPM version =3.0.1, =1.0.72, =0.0.1, =1.1.0, =1.2.4, =2.0.0-beta.2, =2.0.0-beta.2, =1.1.21, =1.1.9, =1.0.0, =1.4.0, =1.1.21, =1.0.1, =1.0.2, =1.0.42 and more Source cves: CVE-2022-29078 Source advisory: OSV:GHSA-PHWQ-J96M-2C2Q...

CVE-2022-29078

creationtimestamp| type| source ---|---|--- 2022-04-25 18:36:10+00:00| seen| https://t.me/cibsecurity/41385 2022-07-19 10:13:43+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/6378 2022-07-19 12:12:47+00:00| published-proof-of-concept|...

CVE-2022-29078

The ejs aka Embedded JavaScript templates package 3.1.6 for Node.js allows server-side template injection in settingsview optionsoutputFunctionName. This is parsed as an internal option, and overwrites the outputFunctionName option with an arbitrary OS command which is executed upon template...

CVE-2022-29078

The ejs aka Embedded JavaScript templates package 3.1.6 for Node.js allows server-side template injection in settingsview optionsoutputFunctionName. This is parsed as an internal option, and overwrites the outputFunctionName option with an arbitrary OS command which is executed upon template...

CVE-2022-29078

CVE-2022-29078 affects Node.js ejs, version 3.1.6. The vulnerability is a server-side template injection in settings[view options][outputFunctionName], where input is parsed as an internal option and can overwrite outputFunctionName to execute an arbitrary OS command during template compilation. ...

CVE-2021-29078

creationtimestamp| type| source ---|---|--- 2021-03-23 11:38:26+00:00| seen| https://t.me/cibsecurity/25300...

CVE-2021-29078

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12, RBK752 before 3.2.17.12, RBK753 before 3.2.17.12, RBK753S before...

CVE-2021-29078

CVE-2021-29078 affects multiple NETGEAR WiFi devices (RBK852/853/854, RBR850, RBS850, RBK752/753/753S/754, RBR750, RBS750) with pre-3.2.17.12 firmware. The vulnerability is a pre-auth, command-injection flaw that could impact confidentiality, integrity, and availability per CVSS scores (3.1: AV:A...

CVE-2023-29078

CVE-2023-29078 is linked to Kiddoware Kids Place Parental Control Android App. Affected version: ≤ 3.8.49; fixed in 3.8.50+. Reported vulnerabilities include XSS, CSRF, and File Upload (stored XSS in the app’s web context per SEC Consult/ CNNVD references). Impact is described as High. Exploitati...